Microsoft Entra ID SCIM: Synchronize users and groups to Flexopus

What is Microsoft Entra ID SCIM synchronization?

SCIM stands for "System for Cross-domain Identity Management"—an open standard for the automated management of user identities across various applications. Microsoft Entra ID (formerly Azure Active Directory) supports this standard and can be connected directly to Flexopus via the Flexopus SCIM API.

Once the connection is established, Entra ID automatically transfers user profiles, attributes (e.g., name, department, job title), and group assignments to Flexopus. Changes in the identity provider are typically reflected in Flexopus within 40 minutes.

What is the purpose of the integration?

The Entra ID SCIM integration fully automates user and group management in Flexopus. Typical use cases include:

• Onboarding new employees: When a new employee is added to a group in Entra ID, their profile is automatically created in Flexopus—even before their first login.
• Archiving departing employees: If a user is deactivated or removed from a group in Entra ID, the account in Flexopus is automatically deactivated. No manual effort, no forgotten accounts.
• Managing groups centrally: Groups from Entra ID are imported as read-only groups in Flexopus. Your identity provider remains the single source of truth.
• Keeping profile data current: Changes to user profiles (e.g., name changes, department transfers) are automatically transferred to Flexopus—without requiring manual intervention from admins.

How easy is the integration?

Setup is performed via the Azure portal and the Flexopus admin dashboard. Essentially, the SCIM API URL and a token from Flexopus are entered into the Entra ID provisioning settings. You then configure which groups should be synchronized, and the synchronization runs fully automatically in the background.

Ready to get started? You can find a complete step-by-step guide for setup in our Help Center.

What are the benefits of the integration?

• Fully automatic synchronization: User profiles and groups are transferred automatically—changes from Entra ID are usually visible in Flexopus within 40 minutes.
• No manual effort: New employees are created automatically, and departing ones are deactivated automatically. IT admins save time and avoid errors caused by manual data maintenance.
• Centralized user management: Entra ID remains the single source of truth. Groups and users only need to be maintained in one place.
• Data minimization: Only the attributes that Flexopus actually needs are transferred. Unnecessary data is not shared.
• Increased security: If an employee is deactivated in Entra ID, they automatically lose access to Flexopus—no risk from forgotten accounts.
• Included for free: The SCIM integration is a standard part of Flexopus and requires no additional license.
• Support for additional attributes: In addition to standard fields, custom attributes such as cost centers or extension attributes can also be synchronized.